Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/_Bu8XuBwbOmyOusldEJpaZhLptY.roa
File: _Bu8XuBwbOmyOusldEJpaZhLptY.roa (raw, json)
Hash identifier: vop32cHhcmX2lmWIvcnB/xZLOAfN1tGjJvA5hlWLIh0=
Subject key identifier: FC:1B:BC:5E:E0:70:6C:E9:B2:3A:EB:25:74:42:69:69:98:4B:A6:D6
Certificate issuer: /CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Certificate serial: 0184373FF777DB06880551536F78EF0484AF
Authority key identifier: 15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/_Bu8XuBwbOmyOusldEJpaZhLptY.roa
Signing time: Wed 02 Nov 2022 07:30:49 +0000
ROA not before: Wed 02 Nov 2022 07:30:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20454
IP address blocks: 45.139.104.0/24 maxlen: 24
45.139.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:37:3f:f7:77:db:06:88:05:51:53:6f:78:ef:04:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1572e24e6b20970823f60e56eeb547b6e08806c4
Validity
Not Before: Nov 2 07:30:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1bbc5ee0706ce9b23aeb2574426969984ba6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:da:19:db:4c:9b:ab:71:38:be:09:f8:08:
1e:3f:b0:8a:24:ea:ac:b4:07:09:56:18:dc:49:c6:
69:34:26:f1:2c:1c:29:14:65:73:bb:41:5e:ef:aa:
f7:ea:e2:38:fb:3b:11:e8:70:f7:e7:3f:02:50:8f:
9a:8a:3b:9c:21:15:62:c1:57:d5:ae:82:ec:5a:5b:
2b:13:dc:10:ef:76:d2:0b:59:42:72:1a:2c:86:58:
02:17:4e:df:7b:df:27:24:ae:5c:4c:e2:96:50:94:
91:ac:9a:5e:b8:ac:04:0f:bb:66:a6:56:49:c8:a4:
80:3f:f5:e2:f1:42:3d:44:1b:60:a7:73:8e:03:c8:
20:30:76:f3:89:70:18:d7:37:de:2b:be:b4:61:6e:
d9:58:16:19:e1:27:58:e6:63:59:04:6f:69:e2:57:
33:97:91:0e:76:ee:a6:1a:da:87:cc:a4:34:30:6d:
41:7e:ac:7f:09:ef:c9:9a:15:20:03:01:a9:86:15:
18:3f:40:32:86:6c:3c:fb:47:0e:5d:c9:0b:d2:92:
9b:6b:f0:6e:6d:72:17:c1:71:d2:3d:fc:19:21:e9:
0a:66:ae:3d:53:34:2f:56:f0:1a:99:b1:f4:50:a4:
aa:01:7b:d5:f0:11:c9:cc:b8:97:bb:50:37:a3:29:
f5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1B:BC:5E:E0:70:6C:E9:B2:3A:EB:25:74:42:69:69:98:4B:A6:D6
X509v3 Authority Key Identifier:
keyid:15:72:E2:4E:6B:20:97:08:23:F6:0E:56:EE:B5:47:B6:E0:88:06:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXLiTmsglwgj9g5W7rVHtuCIBsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/_Bu8XuBwbOmyOusldEJpaZhLptY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1f09af-fb77-4638-9fee-c2fe7ef1cba3/1/FXLiTmsglwgj9g5W7rVHtuCIBsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.104.0/24
45.139.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:01:b3:45:4a:35:55:6b:cf:da:bb:18:d2:d6:5a:99:b5:2a:
be:c0:dd:96:da:95:35:4d:ad:28:cc:bb:00:a7:21:e3:8d:1d:
2a:d4:e2:89:be:bc:f1:db:76:40:40:cf:ae:cc:94:7a:20:82:
16:f0:6f:d5:a7:10:b7:2b:37:c3:2d:2d:56:6e:24:7b:8c:f7:
f1:6a:10:45:e8:45:3e:ca:35:9d:c0:9d:45:d6:4a:47:1f:20:
f0:b3:ea:88:cc:11:80:4e:db:76:8a:d2:82:80:6f:3e:f1:a4:
0b:0a:da:3c:0e:12:f6:66:e5:81:ee:fc:bd:f4:af:80:a2:fa:
34:70:b6:1d:03:fe:bd:30:57:5e:40:85:fd:0e:0f:26:e1:8e:
c4:d9:a6:fa:54:53:92:89:f0:76:86:80:b2:80:19:96:07:d0:
61:c2:85:3d:c9:03:cf:bc:b5:2e:78:ae:87:08:dc:e3:65:30:
b0:1a:c4:a6:28:c2:e9:c5:f4:d5:17:09:81:c7:40:52:cd:b1:
4f:2d:e4:63:b8:27:fb:c5:73:ee:51:49:8d:ba:d1:9f:a4:8e:
12:b2:56:3c:48:16:32:82:70:af:67:5b:86:bb:7b:c9:59:7a:
54:ae:dd:da:33:6e:e2:d3:5c:23:84:6b:cf:69:ac:3f:af:c2:
e9:de:b4:d0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQ3P/d32waIBVFTb3jvBISvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NzJlMjRlNmIyMDk3MDgyM2Y2MGU1NmVlYjU0N2I2ZTA4
ODA2YzQwHhcNMjIxMTAyMDczMDQ5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzFiYmM1ZWUwNzA2Y2U5YjIzYWViMjU3NDQyNjk2OTk4NGJhNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcLaGdtMm6txOL4J+AgeP7CKJOqs
tAcJVhjcScZpNCbxLBwpFGVzu0Fe76r36uI4+zsR6HD35z8CUI+aijucIRViwVfV
roLsWlsrE9wQ73bSC1lCchoshlgCF07fe98nJK5cTOKWUJSRrJpeuKwED7tmplZJ
yKSAP/Xi8UI9RBtgp3OOA8ggMHbziXAY1zfeK760YW7ZWBYZ4SdY5mNZBG9p4lcz
l5EOdu6mGtqHzKQ0MG1Bfqx/Ce/JmhUgAwGphhUYP0Ayhmw8+0cOXckL0pKba/Bu
bXIXwXHSPfwZIekKZq49UzQvVvAambH0UKSqAXvV8BHJzLiXu1A3oyn1EwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPwbvF7gcGzpsjrrJXRCaWmYS6bWMB8GA1UdIwQY
MBaAFBVy4k5rIJcII/YOVu61R7bgiAbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlhMaVRtc2dsd2dqOWc1VzdyVkh0dUNJQnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZjA5YWYtZmI3Ny00NjM4LTlmZWUt
YzJmZTdlZjFjYmEzLzEvX0J1OFh1QndiT215T3VzbGRFSnBhWmhMcHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xZjA5YWYtZmI3Ny00NjM4LTlmZWUtYzJmZTdlZjFjYmEz
LzEvRlhMaVRtc2dsd2dqOWc1VzdyVkh0dUNJQnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYtoAwQA
LYtqMA0GCSqGSIb3DQEBCwUAA4IBAQA9AbNFSjVVa8/auxjS1lqZtSq+wN2W2pU1
Ta0ozLsApyHjjR0q1OKJvrzx23ZAQM+uzJR6IIIW8G/VpxC3KzfDLS1WbiR7jPfx
ahBF6EU+yjWdwJ1F1kpHHyDws+qIzBGATtt2itKCgG8+8aQLCto8DhL2ZuWB7vy9
9K+Aovo0cLYdA/69MFdeQIX9Dg8m4Y7E2ab6VFOSifB2hoCygBmWB9BhwoU9yQPP
vLUueK6HCNzjZTCwGsSmKMLpxfTVFwmBx0BSzbFPLeRjuCf7xXPuUUmNutGfpI4S
slY8SBYygnCvZ1uGu3vJWXpUrt3aM27i01wjhGvPaaw/r8Lp3rTQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:53 2025 by rpki-client